Re: bin/49297: openssh update broke sshd

[christos%zoulas.com@localhost (Christos Zoulas)]

The following reply was made to PR bin/49297; it has been noted by GNATS.

From: christos%zoulas.com@localhost (Christos Zoulas)
To: gnats-bugs%NetBSD.org@localhost, gnats-admin%netbsd.org@localhost, netbsd-bugs%netbsd.org@localhost
Cc: 
Subject: Re: bin/49297: openssh update broke sshd
Date: Tue, 21 Oct 2014 09:02:17 -0400

 On Oct 21,  6:25am, martin%NetBSD.org@localhost (martin%NetBSD.org@localhost) wrote:
 -- Subject: bin/49297: openssh update broke sshd
 
 | >Number:         49297
 | >Category:       bin
 | >Synopsis:       openssh update broke sshd
 | >Confidential:   no
 | >Severity:       critical
 | >Priority:       high
 | >Responsible:    bin-bug-people
 | >State:          open
 | >Class:          sw-bug
 | >Submitter-Id:   net
 | >Arrival-Date:   Tue Oct 21 06:25:00 +0000 2014
 | >Originator:     Martin Husemann
 | >Release:        NetBSD 7.99.1
 | >Organization:
 | The NetBSD Foundation, Inc.
 | >Environment:
 | System: NetBSD whoever-brings-the-night.aprisoft.de 7.99.1 NetBSD 7.99.1 (WHOEVER) #18: Mon Oct 20 17:00:05 CEST 2014 martin%seven-days-to-the-wolves.aprisoft.de@localhost:/usr/src/sys/arch/sparc64/compile/WHOEVER sparc64
 | Architecture: sparc64
 | Machine: sparc64
 | >Description:
 | 
 | After updating this machine to -current as of yesterday (i.e. with the brand
 | new openssh imported) I can't log into it from some windows machines
 | any more:
 | 
 | Oct 21 08:16:19 whoever-brings-the-night sshd[1610]: fatal: no matching cipher found: client aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,twofish-cbc,arcfour server aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm%openssh.com@localhost,aes256-gcm%openssh.com@localhost,chacha20-poly1305%openssh.com@localhost [preauth]
 | 
 
 Yes, they removed a whole bunch of ciphers because they are not supporting
 them anymore. We could either consider bringing them back, or you need to
 upgrade your windows ssh to something newer.
 
 christos